Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32322d3232203d3e203532383631.roa
File:                     3137372e3132342e33362e302f32322d3232203d3e203532383631.roa (raw, json)
Hash identifier:          3oS0PgKVlulQADm0SxxDN78lahdXvaRse80PbEI3y4k=
Subject key identifier:   00:BA:F1:10:99:D2:27:DD:18:02:2A:56:EC:E6:87:80:40:75:CA:7C
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       2390D8676F5CAE475634F71217F0FE21D9C58C75
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32322d3232203d3e203532383631.roa
Signing time:             Tue 24 Dec 2024 13:51:08 +0000
ROA not before:           Tue 24 Dec 2024 13:46:08 +0000
ROA not after:            Tue 23 Dec 2025 13:51:08 +0000
asID:                     52861
IP address blocks:        177.124.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 10:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:90:d8:67:6f:5c:ae:47:56:34:f7:12:17:f0:fe:21:d9:c5:8c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Dec 24 13:46:08 2024 GMT
            Not After : Dec 23 13:51:08 2025 GMT
        Subject: CN=00BAF11099D227DD18022A56ECE687804075CA7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:27:4c:46:f7:f9:7d:b2:aa:9b:6d:c6:15:
                    55:38:78:60:00:e6:6c:44:76:9e:9d:5f:1d:a6:03:
                    09:9c:28:ab:dc:b7:97:1f:aa:38:b6:90:09:0a:b1:
                    40:1a:f6:23:af:2f:46:2c:1e:64:b6:ec:7a:e3:5d:
                    1b:e6:00:73:13:fc:ff:4c:70:6c:54:98:a3:ba:fa:
                    99:ff:a9:7c:4c:a1:f9:54:75:94:df:18:50:8c:0a:
                    d5:af:5c:13:d7:40:a6:08:c9:6a:53:b0:9e:14:42:
                    c4:42:e2:58:a6:02:bc:ff:2f:99:8c:40:b7:32:61:
                    96:2e:67:62:fe:2c:5e:db:bd:e7:d6:b1:a3:20:bf:
                    75:7f:9d:44:24:10:43:75:e8:ec:6a:ee:37:4f:ee:
                    d5:0e:48:b3:78:d4:72:ce:9d:16:2d:f1:70:85:9a:
                    b9:ac:ff:75:a9:0a:7d:40:b3:da:0d:e3:aa:98:19:
                    a3:da:05:72:17:d7:4f:bf:dc:45:e0:a7:64:70:e7:
                    bb:33:45:59:60:ee:74:c1:83:b6:e5:49:45:18:ab:
                    f2:ff:c2:8c:ff:a3:f0:c6:58:2d:ae:b1:f3:00:6f:
                    5e:58:df:2c:54:3f:4f:47:a7:4c:9e:d7:63:ea:77:
                    1a:25:e8:70:6c:3e:ee:14:f4:bf:82:b8:42:fc:75:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BA:F1:10:99:D2:27:DD:18:02:2A:56:EC:E6:87:80:40:75:CA:7C
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e3132342e33362e302f32322d3232203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:b4:39:6b:48:7b:65:b9:59:04:2f:7e:1b:17:7c:eb:2a:7a:
         ee:8e:9a:eb:c7:14:48:46:94:96:30:71:70:9a:09:02:ff:81:
         78:7e:5c:d5:4b:22:29:76:4b:f7:81:a3:08:73:37:d0:49:b7:
         4e:e5:8b:e4:05:59:f2:71:fb:af:cb:a2:15:51:14:40:d3:e2:
         e8:11:d4:11:06:20:64:a1:61:f1:c7:12:cc:c6:56:e4:c8:c3:
         b0:65:66:43:92:f5:74:29:32:91:2b:ab:a3:51:90:05:7f:23:
         74:e2:02:8b:96:6d:46:de:ff:f6:78:e6:32:34:62:47:6a:e2:
         fd:26:28:88:63:37:65:13:ac:79:9c:9f:46:27:84:c5:71:33:
         57:2f:59:51:dc:90:9b:82:90:59:3c:2b:e6:79:92:40:b3:fe:
         56:37:3b:1e:cd:8a:7e:24:48:ef:a3:13:8d:6c:ea:29:37:ac:
         fb:4b:32:57:4c:ee:8a:c6:5d:99:a3:1c:3c:79:9f:39:0e:1b:
         12:5d:99:c6:ce:6e:1c:42:07:53:d2:3c:b7:0f:b2:b0:a8:f8:
         32:88:9c:bf:bf:6d:b0:29:4e:23:ca:28:34:e3:02:9a:5d:c8:
         62:f3:3e:35:c7:61:d1:d8:65:c3:d6:1c:30:49:71:e7:3f:66:
         69:15:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:29:56 2025 by rpki-client